4 ms·

Opera do. Cisco have their own. Oracle do (for Java, primarily) but tend not to participate in CA/B Forum much. Brave did previously have something of a root pr

by nickf 2y ago

Opera do. Cisco have their own. Oracle do (for Java, primarily) but tend not to participate in CA/B Forum much. Brave did previously have something of a root program - not sure if they still do or if they track Moz and/or Chromium. Quihoo 360 (China) have a root program, too. There are certainly other 'smaller' ones.

lxgr 2y ago
Interesting, although I do still suspect that the trend is to just piggy back onto one of the large well-respected ones. For example, I do believe that Opera used to have their own (while they were still doing well), but they seem to be using Chrome these days [1]: > Opera considers certificates presented trustworthy only when they either have a certificate chain that can be validated up to a Root CA certificate included in the Chrome Root Store or a certificate explicitly configured to be trusted by the user. [1] https://security.opera.com/en/webpki-trust-anchors/ https://security.opera.com/en/webpki-trust-anchors/